Nextcloud killed its bug bounty programme today. AI-generated spam reports made it unusable. Curl, Node.js, Google's VRP, HackerOne's IBB: same story. AI floods the triage queue, nobody can find real bugs, programmes shut down. The tool meant to help is breaking the system.